objectclass AuditAdd - sup AuditObject
must: AddEntry
it would be nice if the entry itself could just be included inline,
to keep the entire audit entry human-readable, but I suspect it would
be more practical to store the LDIF or BER of the entry in a separate
attribute. My original implementation added this stuff inline.

objectclass AuditModify - sup AuditObject
must: modification

attribute modification -
( + | - | = ) attributeDescription $ value

Of course we could just collapse AuditAdd into AuditModify. In the
interest of brevity/efficiency I would omit the attributeDescription on
subsequent values when providing multiple values for an attribute. To
avoid problems with value uniqueness I'd add an index to each value. So